# Google vulnerabilities Source: https://junglewise.ai/threats/vendors/google Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 00:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/google.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 4,909 vulnerabilities in Google: 251 in the last 7 days and 2,424 in the last 90 days, 266 of them critical and 95 exploited in the wild. The most recent, CVE-2026-126922, was published on 11 November 2026. 850 vulnerabilities in the last four weeks, up 41% on the four before (601). 11 critical against 39, 2 exploited in the wild against 1. 38 technologies have a page of their own. ## Counts - Last 7 days: 251 - Last 30 days: 1062 - Last 90 days: 2424 - All time: 4909 (266 critical, 95 exploited in the wild) ## About Google American technology company that develops search, cloud computing, software, and advertising products. ## Latest Google vulnerabilities - [CVE-2026-126922: Google Chrome out of bounds read in Skia](https://junglewise.ai/threats/cve-2026-126922-out-of-bounds-read-in-skia-in-google-chrome-prior-to-157-0-8103) (info, published 11 Nov 2026) - [CVE-2026-126921: Google Chrome use after free in Accessibility](https://junglewise.ai/threats/cve-2026-126921-use-after-free-in-accessibility-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126920: Google Chrome information leak in Skia](https://junglewise.ai/threats/cve-2026-126920-information-leak-in-skia-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126919: Google Chrome use-after-free in BrowserTag](https://junglewise.ai/threats/cve-2026-126919-use-after-free-in-browsertag-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126918: Google Chrome use-after-free in Layout](https://junglewise.ai/threats/cve-2026-126918-use-after-free-in-layout-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126917: Google Chrome memory corruption in V8](https://junglewise.ai/threats/cve-2026-126917-memory-corruption-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126916: Google Chrome integer overflow in V8](https://junglewise.ai/threats/cve-2026-126916-integer-overflow-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126915: Google Chrome uninitialized variable in Skia on Android](https://junglewise.ai/threats/cve-2026-126915-use-of-uninitialized-variable-in-skia-in-google-chrome-on-on) (info, published 11 Nov 2026) - [CVE-2026-126914: Google Chrome uninitialized resource in Skia](https://junglewise.ai/threats/cve-2026-126914-uninitialized-resource-in-skia-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126913: Google Chrome out-of-bounds read in Compositing](https://junglewise.ai/threats/cve-2026-126913-out-of-bounds-read-in-compositing-in-google-chrome-prior-to-157) (info, published 11 Nov 2026) - [CVE-2026-126912: Google Chrome buffer overflow in Skia](https://junglewise.ai/threats/cve-2026-126912-buffer-overflow-in-skia-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126911: Google Chrome use after free in Accessibility](https://junglewise.ai/threats/cve-2026-126911-use-after-free-in-accessibility-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126910: Google Chrome type confusion in V8](https://junglewise.ai/threats/cve-2026-126910-type-confusion-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126909: Google Chrome use after free in Passwords](https://junglewise.ai/threats/cve-2026-126909-use-after-free-in-passwords-in-google-chrome-prior-to-157-0-8103) (info, published 11 Nov 2026) - [CVE-2026-126908: Google Chrome type confusion in V8](https://junglewise.ai/threats/cve-2026-126908-type-confusion-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126907: Google Chrome uninitialized resource in Media on Windows](https://junglewise.ai/threats/cve-2026-126907-uninitialized-resource-in-media-in-google-chrome-on-on-windows) (info, published 11 Nov 2026) - [CVE-2026-126906: Google Chrome race condition in Extensions on Mac](https://junglewise.ai/threats/cve-2026-126906-race-condition-in-extensions-in-google-chrome-on-on-mac-prior-to) (info, published 11 Nov 2026) - [CVE-2026-126905: Google Chrome incomplete cleanup in V8](https://junglewise.ai/threats/cve-2026-126905-incomplete-cleanup-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126904: Google Chrome use-after-free in Compositing](https://junglewise.ai/threats/cve-2026-126904-use-after-free-in-compositing-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126903: Google Chrome improper state validation in ANGLE on Windows](https://junglewise.ai/threats/cve-2026-126903-improper-state-validation-in-angle-in-google-chrome-on-on) (info, published 11 Nov 2026) - [CVE-2026-126902: Google Chrome incorrect reference resolution in Browser sandbox escape](https://junglewise.ai/threats/cve-2026-126902-incorrect-reference-resolution-in-browser-in-google-chrome-on-on) (info, published 11 Nov 2026) - [CVE-2026-126901: Google Chrome use-after-free in PDF](https://junglewise.ai/threats/cve-2026-126901-use-after-free-in-pdf-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126900: Google Chrome use after free in CSS](https://junglewise.ai/threats/cve-2026-126900-use-after-free-in-css-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126899: Google Chrome use after free in Elements](https://junglewise.ai/threats/cve-2026-126899-use-after-free-in-elements-in-google-chrome-prior-to-157-0-8103) (info, published 11 Nov 2026) - [CVE-2026-126898: Google Chrome uninitialized resource in Skia](https://junglewise.ai/threats/cve-2026-126898-uninitialized-resource-in-skia-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) ## Most severe Google vulnerabilities - [CVE-2025-10585: Google Chrome type confusion in V8 engine](https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine) (critical, exploited in the wild, CVSS 9.8, published 24 Sep 2025) - [CVE-2020-16017: Use after free in CefSharp](https://junglewise.ai/threats/cve-2020-16017-google-chrome-use-after-free-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 27 Nov 2020) - [CVE-2024-7971: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-7971-google-chromium-v8-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 26 Aug 2024) - [CVE-2024-5274: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-5274-google-chromium-v8-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 28 May 2024) - [CVE-2024-4947: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-4947-google-chromium-v8-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 20 May 2024) - [CVE-2024-4671: Google Chromium Visuals Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2024-4671-google-chromium-visuals-use-after-free-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 13 May 2024) - [CVE-2023-6345: Google Skia Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-6345-google-skia-integer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 30 Nov 2023) - [CVE-2023-2136: Google Chrome Skia Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-2136-google-chrome-skia-integer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 21 Apr 2023) - [CVE-2022-3075: Google Chromium Mojo Insufficient Data Validation Vulnerability](https://junglewise.ai/threats/cve-2022-3075-google-chromium-mojo-insufficient-data-validation-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 8 Sep 2022) - [CVE-2020-16010: Google Chrome for Android UI Heap Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2020-16010-google-chrome-for-android-ui-heap-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 3 Nov 2021) ## Vulnerabilities per week 850 vulnerabilities in the last four weeks, up 41% on the four before (601). 11 critical against 39, 2 exploited in the wild against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 24 | 2 | 0 | | 24 Aug 2026 | 333 | 44 | 0 | | 31 Aug 2026 | 41 | 11 | 1 | | 7 Sep 2026 | 324 | 37 | 1 | | 14 Sep 2026 | 151 | 13 | 1 | | 21 Sep 2026 | 4 | 0 | 0 | | 28 Sep 2026 | 161 | 24 | 0 | | 5 Oct 2026 | 285 | 2 | 0 | | 12 Oct 2026 | 52 | 7 | 0 | | 19 Oct 2026 | 363 | 2 | 2 | | 26 Oct 2026 | 83 | 0 | 0 | | 2 Nov 2026 | 352 | 2 | 0 | | 9 Nov 2026 | 251 | 1 | 1 | ## Google technologies - [Google Chrome](https://junglewise.ai/threats/technologies/chrome): 3,930 vulnerabilities - [Google Android](https://junglewise.ai/threats/technologies/android): 628 vulnerabilities - [Google Chrome for iOS](https://junglewise.ai/threats/technologies/chrome-for-ios): 79 vulnerabilities - [Google Pixel](https://junglewise.ai/threats/technologies/google-pixel): 72 vulnerabilities - [Google Cloud Platform](https://junglewise.ai/threats/technologies/google-cloud-platform): 43 vulnerabilities - [Google Chromium V8](https://junglewise.ai/threats/technologies/chromium-v8): 41 vulnerabilities - [Google Chromium](https://junglewise.ai/threats/technologies/chromium): 37 vulnerabilities - [Google TensorFlow](https://junglewise.ai/threats/technologies/tensorflow): 31 vulnerabilities - [Google Pixel Devices](https://junglewise.ai/threats/technologies/pixel-devices): 27 vulnerabilities - [Google Pixel Firmware](https://junglewise.ai/threats/technologies/pixel-firmware): 27 vulnerabilities - [Google Android Framework](https://junglewise.ai/threats/technologies/android-framework): 22 vulnerabilities - [Google Chrome for Android](https://junglewise.ai/threats/technologies/chrome-for-android): 21 vulnerabilities - [Google ChromeOS](https://junglewise.ai/threats/technologies/chromeos): 20 vulnerabilities - [Google Angular](https://junglewise.ai/threats/technologies/google-angular): 17 vulnerabilities - [Google Android kernel](https://junglewise.ai/threats/technologies/google-android-kernel): 10 vulnerabilities - [Google Pixel Bootloader](https://junglewise.ai/threats/technologies/pixel-bootloader): 10 vulnerabilities - [Google WebView](https://junglewise.ai/threats/technologies/webview): 10 vulnerabilities - [Google A2ui\](https://junglewise.ai/threats/technologies/a2ui): 9 vulnerabilities - [Google Chrome Os](https://junglewise.ai/threats/technologies/chrome-os): 9 vulnerabilities - [Google Go](https://junglewise.ai/threats/technologies/google-go): 9 vulnerabilities - [Google MCP Toolbox for Databases](https://junglewise.ai/threats/technologies/mcp-toolbox-for-databases): 9 vulnerabilities - [Google Android Automotive OS](https://junglewise.ai/threats/technologies/android-automotive-os): 8 vulnerabilities - [Google MCP Toolbox](https://junglewise.ai/threats/technologies/mcp-toolbox): 8 vulnerabilities - [Google Pixel HWCodec Firmware](https://junglewise.ai/threats/technologies/pixel-hwcodec-firmware): 8 vulnerabilities - [Google Pixel Modem](https://junglewise.ai/threats/technologies/pixel-modem): 7 vulnerabilities - [Google Libpixelimsmedia](https://junglewise.ai/threats/technologies/libpixelimsmedia): 5 vulnerabilities - [Google Cloud Application Integration](https://junglewise.ai/threats/technologies/cloud-application-integration): 4 vulnerabilities - [Google Angular Compiler](https://junglewise.ai/threats/technologies/compiler): 4 vulnerabilities - [Google Protobuf](https://junglewise.ai/threats/technologies/protobuf): 4 vulnerabilities - [Google Angular SSR](https://junglewise.ai/threats/technologies/ssr): 4 vulnerabilities - [Google Trusty](https://junglewise.ai/threats/technologies/trusty): 4 vulnerabilities - [Google Android XR](https://junglewise.ai/threats/technologies/android-xr): 3 vulnerabilities - [Google Angular Common](https://junglewise.ai/threats/technologies/angular-common): 3 vulnerabilities - [Google Application Integration](https://junglewise.ai/threats/technologies/application-integration): 3 vulnerabilities - [Google Brotli](https://junglewise.ai/threats/technologies/brotli): 3 vulnerabilities - [Google Chrome WebView](https://junglewise.ai/threats/technologies/chrome-webview): 3 vulnerabilities - [Google Gemini-Cli](https://junglewise.ai/threats/technologies/gemini-cli): 3 vulnerabilities - [Google Skia](https://junglewise.ai/threats/technologies/skia): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Google vulnerabilities", https://junglewise.ai/threats/vendors/google, 13 November 2026.